# Datomic and Log4j CVE-2021-44228. No vulnerability in Datomic

**URL:** <https://forum.datomic.com/t/datomic-and-log4j-cve-2021-44228-no-vulnerability-in-datomic/2013>\
**Category:** Announcements\
**Created:** [December 13, 2021, 3:40pm UTC](https://forum.datomic.com/t/datomic-and-log4j-cve-2021-44228-no-vulnerability-in-datomic/2013 "2021-12-13T15:40:56Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jaret](https://sea2.discourse-cdn.com/flex016/user_avatar/forum.datomic.com/jaret/32/45_2.png) [@jaret](https://forum.datomic.com/u/jaret)\
**Post date:** [December 13, 2021, 3:40pm UTC](https://forum.datomic.com/t/datomic-and-log4j-cve-2021-44228-no-vulnerability-in-datomic/2013/1 "2021-12-13T15:40:56Z")

</div>

Datomic does not use log4j. Datomic does not have dependency on log4j. Datomic includes a bridge `log4j-over-slf4j` which is only included for customers who use log4j. Therefore there is no Datomic level vulnerability unless you introduced log4j in your app.

For more information regarding this vulnerability, please see: [http://www.slf4j.org/log4shell.html](http://www.slf4j.org/log4shell.html)